Vendors / Krzysztof Dabrowski Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Krzysztof Dabrowski records in CISA KEV No Krzysztof Dabrowski vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 36
cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unknown username.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01588 · Published 2001-01-22 · No fix listed
Priority LOW 11
cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file.
CVSS 2.0 LOW 2.1· Local · No auth · Interaction — · EPSS 0.00318 · Published 2005-02-27 · No fix listed
Open these records in search → All records by CVSS severity
Critical0 High1 Medium0 Low1 No CVSS0